This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa File: dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa (raw, json) Hash identifier: 22Pf0XjeESbjL/t+0AIAcsw4G9pn5ax3ko7GmRs5HKI= Subject key identifier: 76:71:C8:1D:79:F1:0C:83:D5:44:A6:0A:E0:18:C1:12:5F:6B:45:1C Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c Certificate serial: 019B7F82A4DB833D8C774D3476F192E97E8B Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa Signing time: Fri 02 Jan 2026 16:20:26 +0000 ROA not before: Fri 02 Jan 2026 16:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138915 IP address blocks: 140.150.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a4:db:83:3d:8c:77:4d:34:76:f1:92:e9:7e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c Validity Not Before: Jan 2 16:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7671c81d79f10c83d544a60ae018c1125f6b451c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:e8:1d:8c:3f:64:84:b8:ab:1b:ef:4f:b2: 15:43:1a:dc:83:81:21:28:f3:59:f5:27:e0:9a:a0: bc:56:1c:4f:12:61:00:b5:0b:f7:83:23:66:d5:90: 12:d7:4b:8e:fc:00:0d:6e:a6:1c:35:14:e7:17:1f: 25:a6:5d:b2:a8:e5:d4:d8:eb:fd:7c:58:46:43:45: c5:e1:a5:31:bc:88:ad:29:8f:3b:33:6d:7f:b4:b3: 8d:5c:b1:6e:61:05:c1:42:83:97:eb:30:bc:d3:bc: e9:54:a2:61:85:ea:1f:5a:70:9b:93:2d:a9:fa:23: 03:10:8c:49:48:03:63:23:a5:c1:04:d8:af:dd:70: fc:6e:43:31:27:7c:ac:d7:53:13:2c:27:1c:72:30: 12:4f:c5:f4:a9:95:39:39:36:b5:44:80:f0:43:99: d3:fa:70:72:07:26:f3:74:69:f5:01:1b:cc:9c:8c: 03:a0:9e:76:4c:c2:8c:8d:17:2e:fb:44:e3:97:4f: 08:ff:68:e8:ed:59:de:a3:77:02:d0:52:ba:e0:ef: d3:26:5f:bb:c0:36:ec:da:aa:ca:10:a9:c8:10:ba: c4:9b:c2:c2:d2:94:17:5c:8b:7e:3f:b8:ad:f4:d7: 9a:28:bb:1b:c0:1a:da:95:cc:3b:a6:41:93:b8:d8: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:71:C8:1D:79:F1:0C:83:D5:44:A6:0A:E0:18:C1:12:5F:6B:45:1C X509v3 Authority Key Identifier: keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.13.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:8a:8e:60:02:56:e8:bf:d3:ff:bd:d3:65:82:95:03:29:81: d8:c6:24:84:c3:2e:6e:c4:a4:42:62:61:04:cc:09:19:c8:da: 20:51:c4:95:f5:94:fb:5d:fc:2e:4d:2a:c4:1d:cf:f1:b3:5e: 13:27:e3:32:83:93:fa:da:4b:4b:05:74:11:96:b8:40:72:e6: c1:ba:a5:b8:62:23:97:91:e0:4e:e2:71:e9:75:1b:4f:57:77: a9:42:46:91:7b:bc:f2:c4:10:aa:81:84:3f:e6:79:a1:38:39: b3:b5:3b:75:f0:46:b7:48:c1:75:3e:80:19:cd:35:e2:40:2c: f2:11:21:db:f1:6f:2c:99:ab:03:2d:46:30:81:c3:35:a3:7e: e1:34:15:ee:22:0a:a3:98:78:a1:ce:ad:32:fd:bd:aa:db:46: 44:62:e9:ff:ed:3f:33:0f:f8:ca:19:7c:5e:9d:ab:01:a3:d0: 7c:77:da:c7:01:19:5c:ca:42:be:e2:26:37:64:b2:cd:27:54: a1:80:a8:f7:60:88:de:b0:a8:a0:69:16:0b:ae:00:51:31:08: 85:0c:5e:5f:e6:92:42:44:80:58:41:24:8d:63:5d:ee:52:10: 39:5d:40:58:ed:d9:e8:0b:14:f5:d6:21:a2:0a:de:8f:3d:2d: 8a:f4:f3:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gqTbgz2Md000dvGS6X6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx YTU3NWMwHhcNMjYwMTAyMTYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjcxYzgxZDc5ZjEwYzgzZDU0NGE2MGFlMDE4YzExMjVmNmI0NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLHoHYw/ZIS4qxvvT7IVQxrcg4Eh KPNZ9SfgmqC8VhxPEmEAtQv3gyNm1ZAS10uO/AANbqYcNRTnFx8lpl2yqOXU2Ov9 fFhGQ0XF4aUxvIitKY87M21/tLONXLFuYQXBQoOX6zC807zpVKJhheofWnCbky2p +iMDEIxJSANjI6XBBNiv3XD8bkMxJ3ys11MTLCcccjAST8X0qZU5OTa1RIDwQ5nT +nByBybzdGn1ARvMnIwDoJ52TMKMjRcu+0Tjl08I/2jo7Vneo3cC0FK64O/TJl+7 wDbs2qrKEKnIELrEm8LC0pQXXIt+P7it9NeaKLsbwBralcw7pkGTuNg1/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZxyB158QyD1USmCuAYwRJfa0UcMB8GA1UdIwQY MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt OGIyYjQ3MzhiMWNjLzEvZG5ISUhYbnhESVBWUktZSzRCakJFbDlyUlJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjJYNMA0G CSqGSIb3DQEBCwUAA4IBAQBcio5gAlbov9P/vdNlgpUDKYHYxiSEwy5uxKRCYmEE zAkZyNogUcSV9ZT7XfwuTSrEHc/xs14TJ+Myg5P62ktLBXQRlrhAcubBuqW4YiOX keBO4nHpdRtPV3epQkaRe7zyxBCqgYQ/5nmhODmztTt18Ea3SMF1PoAZzTXiQCzy ESHb8W8smasDLUYwgcM1o37hNBXuIgqjmHihzq0y/b2q20ZEYun/7T8zD/jKGXxe nasBo9B8d9rHARlcykK+4iY3ZLLNJ1ShgKj3YIjesKigaRYLrgBRMQiFDF5f5pJC RIBYQSSNY13uUhA5XUBY7dnoCxT11iGiCt6PPS2K9PO7 -----END CERTIFICATE-----Generated at Mon Jan 19 08:59:48 2026 by rpki-client